Tag
medium
advisory
Unauthorized VNC Exposure to the Internet
1 rule 2 TTPsThe exposure of VNC services to the public internet enables unauthorized remote access, providing adversaries a vector for initial access or persistent backdoors.
vnc
c2
network-security
remote-access
1r
2t
high
advisory
VNC (Virtual Network Computing) from the Internet
1 rule 3 TTPsThis brief detects unauthorized Virtual Network Computing (VNC) traffic originating from the Internet and targeting internal network segments on TCP ports 5800-5810, indicating potential initial access or backdoor exploitation by threat actors leveraging exposed VNC services.
command-and-control
initial-access
remote-access
network
vnc
1r
3t